
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
cyclebane
Advanced tools
Transform directed acyclic graphs using map-reduce and groupby operations
This library is an attempt to merge the concepts of directed acyclic graphs (DAG) with array-like objects such as NumPy arrays, Pandas DataFrames, or Xarray/Scipp DataArrays. This could be useful for describing tasks graphs, e.g., when a series of tasks is applied to chunks of an array. These tasks also have an array structure. After an reduction operation of chunks, the graph loses this structure, i.e., only a subset of the graph's nodes has array structure. What if we could work with this structure, even though only parts of the graph follows it? And what if we could use the power of array slicing with named dimensions, or select by label? This is what Cyclebane tries to do.
Our initial goal is to support:
map operations of a DAG's source nodes over an array-like (https://docs.dask.org/en/latest/high-level-graphs.html).
Cyclebane will effectively copy all descendants of those nodes, once for each array element.
Cyclebane will support joint mappings of multiple source nodes by mapping over, e.g., a DataFrame with multiple columns, as well as chaining independent map operations at different source nodes.
In the latter case this will effectively broadcast at descendant nodes that depend on multiple such source nodes.reduce operations at descendants of mapped nodes.
This will add a new node with edges to all copies of the mapped node being reduced.
Cyclebane will support reducing only individual axes or all axes, similar to Numpy.groupby operations similar to Pandas and Xarray (albeit more limited).map (or groupby) operations based on their indices.
The graph structure will be left untouched, i.e., nodes after a reduce operation will be preserved, but fewer edges will lead to the reduce node.See also Dask's High Level Graphs for a related concept (without the direct support for any such operations).
python -m pip install cyclebane
FAQs
Transform directed acyclic graphs using map-reduce and groupby operations
We found that cyclebane demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.